reece1
1
The header in the Id_token that openidconnect.net produces says that the algorithm is HS256
{
"alg": "HS256",
"typ": "JWT"
}
However the JWKS doesn’t have HS256
So I can’t validate the signature, any idea if I’m doing something wrong or is this tool borked?
Thanks
Hi @reece1,
I recommend going to your Application settings > Advanced Settings > OAuth and setting the JSON Web Token (JWT) Signature Algorithm option to RS256.
That should generate RS256 JWT tokens.
Let me know if you have any further questions.
Thanks,
Rueben